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The Internet is a fundamental part of our daily lives, 
but have you ever truly stopped to think about the cost 
you are paying for this service? 

A When the internet was created back in the '80s, it 
was designed as a means of connecting distributed 
groups of people and providing a means of 
communicating and sharing information. 

A It was not created with a goal of protecting user 
privacy 

A With things like frequent data leaks, GDPR, and 
Cabridge Analytica, it is more important than ever to 
understand how to protect our privacy in this modern 
era 

A To better understand this, let's take a quick look at 
what happens when you connect to the internet. 



The Internet 



Most people are aware that their computer connects to their 
router and modem which then connects them to the internet 
where their favorite sites live 

A Since all of the computers are sending their traffic via the router, 
an evil coffee shop offering free wifi can easily see all of the 
websites being accessed 

A Or even if you are connecting from a trusted network, your ISP 
can still see what you are accessing 

A This can be problematic in a number of circumstances. Imagine 
looking up medical advice for a chronic illness that is plaguing 
you, only to later be fired from your job. 

A Or what if you are living in a country with an oppressive 
government that is attempting to identify and put a stop to all 
opposition? All of a sudden, being caught visiting certain websites 
could become a matter of life and death. 

Or what if you simply want to stop your ISP from manipulating 
your web traffic to inject a banner displaying a notification about 
your account? 
































Arguing that you don't care 
about the right to privacy 
because you have nothing to 
hide is no different than saying 
you don't care about free speech 
because you have nothing to say. 

— Edward Snowden 
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A lot of you are probably sitting there thinking, "I'm just 
a regular old user with nothing to hide. Why should I 
care if someone knows that I bought a giant stuffed 
bear online?" 

A Once your data is out there, it is out there forever to 
be bought/sold and combined with other data sources 
to build up an even more complete profile of you. 

A If you still don't care about your privacy, do it for the 
people around you. 

A If only a small number of people are taking steps to 
protect their privacy, they will stand out as being 
"different" and attract attention. 

A We need to change the norm to be one of using safe 
browsing habits in order to protect those people who 
really need it. 



Private Browsing 



Most popular browsers ship with a 
feature called Private Browsing 
A Despite its name, this feature will not 
protect your privacy in the situations 
being discussed 

A Private browsing doesn't expose your 
saved cookies/sessions and does not 
save visited websites to the browser's 
history 

A Your ISP and the websites you visit 
still see your traffic as usual 
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An ever-growing number of websites support connecting 
in a secure and encrypted form using TLS 
A You can recognize one of these secure connections by 
the https:// bit at the start of the URL or the classic green 
lock icon (although this is changing in some browsers) 

A There are even web browser extensions such as "HTTPS 
Everywhere" by The Tor Project and the EFF that will 
attempt to force all connections to utilize this encryption. 

A This will prevent the coffee shop from seeing what you are 
sending, but they can still see where you are sending it to 
A This approach is also highly dependent on the website in 
question being capable of serving its contents over a 
secure connection 

A The main advantage of this approach is that it can be 
handled entirely server side without the need for users to 
install any additional software. 




Proxies / VPN 

Good Luck, I'm Behind 7 Proxies 


— 4chan 
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So what can you do to conceal the sites you are visiting? 

A You can do what most people do and ask your favorite search engine. 

A When you ask Bing how to conceal your internet traffic, you will discover a 
plethora of free proxies and paid VPN solutions that promise to protect your privacy 
A A proxy is a server that you send your requests to which then forwards them on to 
the real site 

A The coffee shop owner will now see you connections going to the proxy instead 
of the real site 

Proxies do not provide encryption and have to be configured for each application 
individually 

A So you better not forget about your email and chat applications 
A A VPN, on the other hand, will encrypt all traffic from your computer, but usage of 
these apps is sometimes blocked by governments 

With both of these solutions, you are now sending all of your traffic to some 
random server, effectively placing all of your eggs in one basket 
A If they turn out not to be trustworthy, they might manipulate your traffic and steal 
your data. 

A Or if they are logging activity and get ordered to turn over the logs to the 
government, say good bye to your data. 

Using multiple proxies, as in this famous 4chan quote, can be a means of ensuring 
no proxy knows both where you are connecting from and what site you are visiting, 
but once again, you better trust all of the proxies in the chain. 



Tor 



Tor is a newer open source technology that takes the "7 Proxies" 
concept to the extreme 

A It will route your traffic securely through multiple relay nodes 
before ultimately sending the request to the final destination. 

A These nodes are located all over the world and run by many 
different individuals and groups. This means that even if one node 
is compromised, only a small amount of anonymous data is at risk. 
A A downside to the multiple relays and architectural design of Tor 
is that is can be quite slow, and is generally not recommended for 
use when performing actions like streaming Netflix. 

A Using Tor requires downloading and running a custom 
application 

A A combination of Tor and TLS encryption is one of the best 
options at present for preventing people from knowing the sites 
you visit 

A 9 Authoritative Directory Servers —> 

A No economic incentive to run nodes 
A No real control for node operators to control traffic (risky) 




Browser and website plug-ins are a 
common method of adding extra 
functionality 

A However, to add this functionality, they 
require access to the sites you visit and the 
data you send 

A This means an evil plug-in can easily steal 
your data and share it with an attacker 
A Closely audit the plug-ins you install and 
the permissions they are requesting. 

A If it sounds or looks suspicious, don't use 
it! 



Tracking 
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my name is 
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Even if you manage to hide the websites you are 
visiting, the battle is not over. 

A Many sites require you to login before you can 
interact with them or to bypass a paywall 
A Logging in immediately assigns an identity to all 
actions you take on the site. 

A If you login on multiple sites, tracking pixels and 
data exchange agreements can allow your 
identity on one site to be mapped to your identity 
on another site. 

A You can try to avoid logging in on sites, using 
fake one-time-use accounts, disabling javascript, 
and sending the Do Not Track (DNT) header 




Solution? 


• Completely distributed and decentralized Open Source solution 

• Impossible to censor by a company/ISP/government without blocking large amounts 
of the internet 

• Proper usage incentives and infinitely scalable to ensure long-term sustainability 
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Talking about a problem is one thing, but ideally, 
there would also be a viable solution available. 
What would such a solution look like? 

A It needs to be completely distributed and 
decentralized. As well as Open Source to facilitate 
auditing. 

A It must be impossible to censor, even by a 
government 

A And it needs to be scalable and have proper 
usage incentives to facilitate continued growth of a 
healthy system 

A If solving this problem sounds interesting to you, 
be sure to check out Orchid, where we are working 
to do just that. 





